MSIL/Kryptik.ZHS information

The MSIL/Kryptik.ZHS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Kryptik.ZHS virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine MSIL/Kryptik.ZHS?


File Info:
crc32: B5321FD3
md5: 4e62febb0ac594a5f0e92021ae54850f
name: 4E62FEBB0AC594A5F0E92021AE54850F.mlw
sha1: c1f35e1910ab59c21684e600794fecbefba277a1
sha256: 16486755e20c9abda9b01c31fa8bdd80033f5c2c5320fa1611645942b4612987
sha512: 3b69ce16b543255e5a4f8b4bb430993a34720b9ce03c237003c68e26be20f32cec3fc749322415371937de0900a49cb382ada3520eac486d158aa92db7676b91
ssdeep: 768:7c9TdcNfhldBQCTsWA6zSdmQUjfcsiB7FPPVUn3VmiAJbcxOXyu+yTdxOGFqRD1:eK9hlICTbfWxUjfiBYgiSE4dUSrUY
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Muavi
Assembly Version: 1.2.3.4
InternalName: SrFNhCl.exe
FileVersion: 1.2.3.4
CompanyName: Muavi
LegalTrademarks: Muavi 2021
Comments: Muavi Music Player
ProductName: Muavi Music Player V2
ProductVersion: 1.2.3.4
FileDescription: Muavi
OriginalFilename: SrFNhCl.exe

MSIL/Kryptik.ZHS also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 85)
ALYac	Trojan.GenericKD.36624462
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:MSIL/Kryptik.a91eb66f
K7GW	Trojan ( 005766a11 )
Cyren	W64/Dothetuk.B.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik.ZHS
APEX	Malicious
Avast	Win64:Trojan-gen
BitDefender	Trojan.GenericKD.36624462
MicroWorld-eScan	Trojan.GenericKD.36624462
Ad-Aware	Trojan.GenericKD.36624462
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.4e62febb0ac594a5
Emsisoft	Trojan.GenericKD.36624462 (B)
Webroot	W32.Malware.Gen
Avira	TR/Kryptik.dbljc
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Wacatac.B!ml
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.36624462
McAfee	Artemis!4E62FEBB0AC5
MAX	malware (ai score=90)
Ikarus	Trojan.MSIL.Crypt
Fortinet	PossibleThreat.PALLASNET.H
AVG	Win64:Trojan-gen
Qihoo-360	Win64/Heur.Generic.H8kATgYA

How to remove MSIL/Kryptik.ZHS?

MSIL/Kryptik.ZHS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X